Skip to content
World Watch

Data protection & privacy law in Chad (2026)

Data protection in Chad: comprehensive law.

Chad enacted a comprehensive personal data protection law in 2015 (Act No. 007/PR/2015), supplemented by an implementing decree in 2019. The supervisory authority, ANSICE, was established in parallel under Act No. 006/PR/2015 and became fully operational in 2020. The law establishes data subject rights and controller/processor obligations broadly analogous to those found in African Union-model data protection frameworks.

Last verified Official sources first · MethodologyCompare Chad with other countries

Legal framework

Act No. 007/PR/2015 on the Protection of Personal Data (10 February 2015), implemented by Decree No. 075/PR/2019 (21 January 2019); supervised by the Agence Nationale de Sécurité Informatique et de Certification Électronique (ANSICE)

Key points: data & privacy in Chad

  1. Primary Legislation

    Act No. 007/PR/2015, signed 10 February 2015, governs the collection, processing, storage, transmission and dissemination of personal data in Chad. It is supplemented by Decree No. 075/PR/2019 of 21 January 2019, which provides implementing detail.

    dlapiperdataprotection.com dataprotection.africa clym.io

  2. Supervisory Authority, ANSICE

    The Agence Nationale de Sécurité Informatique et de Certification Électronique (ANSICE), created by Act No. 006/PR/2015, is Chad's data protection and cybersecurity authority. It became fully operational in 2020 and holds powers to investigate, warn, impose formal notices, block data processing, and refer violations for criminal sanction.

    dlapiperdataprotection.com ansice.td dataprotection.africa

  3. Core Controller Obligations

    Controllers must process data lawfully, fairly and transparently; collect only for explicit and legitimate purposes; ensure data minimisation and accuracy; and implement appropriate security measures. Prior notification to or authorisation from ANSICE is required for certain processing activities.

    caseguard.com dlapiperdataprotection.com

  4. Data Subject Rights

    Data subjects hold rights of access to information about processing, rectification of inaccurate data, erasure, and a qualified right to object to processing on legitimate grounds. These rights mirror the core set common across African Union Convention-influenced frameworks.

    caseguard.com clym.io

  5. Penalties & Enforcement

    ANSICE may issue warnings, formal notices, processing suspensions of up to three years, or data blocks of up to three months. Courts may impose fines of XAF 1 million to XAF 10 million (approx. USD 1,700-17,300) and imprisonment of three months to one year for criminal violations.

    dlapiperdataprotection.com dataprotection.africa

  6. Operational Maturity & Recent Activity

    Despite the law dating to 2015, ANSICE only became fully operational in 2020. As of 2024-2025, ANSICE joined the Global Forum on Cyber Expertise (GFCE) and participated in ITU child online protection discussions, signalling growing institutional capacity, though published enforcement actions remain limited.

    techhiveadvisory.africa ansice.td

Sources

  1. dlapiperdataprotection.com/index.html?t=law&c=TD
  2. dlapiperdataprotection.com/index.html?t=authority&c=TD
  3. dlapiperdataprotection.com/index.html?t=enforcement&c=TD
  4. ansice.td/protection-des-donnees-personnelles/
  5. dataprotection.africa/chad/
  6. caseguard.com/articles/personal-data-protection-and-privacy-for-citizens-of-chad/
  7. clym.io/regulations/law-no-007pr2015-chad
  8. techhiveadvisory.africa/insights/bimonthly-update-on-privacy-in-africa-january---february-202

Next for Chad: Digital Payments & FintechLicensing regime

Next topic

Orientation, not legal advice: verify against the primary sources linked above. Last verified 24 May 2026. Methodology & how to cite · State of Technology Regulation 2026